$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json) Hash identifier: ++0Ou2QwqQzIQCrIdAGJPjFTvjEIHTv7TAkE8ZnvBNo= Subject key identifier: 4D:1B:9B:0F:ED:5C:DF:EC:9C:E6:C0:A1:D6:41:6B:E4:4A:05:5E:62 Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft Manifest number: 0812 Signing time: Tue 04 Nov 2025 20:58:52 +0000 Manifest this update: Tue 04 Nov 2025 20:58:52 +0000 Manifest next update: Tue 11 Nov 2025 20:58:52 +0000 Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: 4ZcoQnVI3QP4TO6ie9DHh1Ypwn3IzhlBR2Cwx5uYyTE=) 2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: ovhGH8lbo83g5o7m/4TlTtd4Z3eC4nvxtcRanzpccvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Validity Not Before: Nov 4 20:58:52 2025 GMT Not After : Nov 11 20:58:52 2025 GMT Subject: CN=690a690c-e517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:04:ec:3a:9e:e3:1d:3c:f5:56:3a:92:49: 44:50:fd:f7:96:0f:17:60:20:3a:46:b1:09:8c:9a: 23:13:78:6a:89:9a:12:99:7e:b1:39:42:12:70:32: 23:24:b3:96:4e:a2:ba:4f:31:b6:64:99:02:f2:a1: 07:b5:cc:89:0a:8f:48:76:06:df:1a:7b:de:11:22: dc:ec:d9:3f:69:16:63:f1:69:38:80:86:5f:41:25: ef:b9:fc:db:35:83:cc:83:81:ed:38:9f:d2:b8:0e: cf:21:76:42:dc:6b:e1:e9:52:82:66:ca:fc:eb:48: 41:47:29:fb:f3:62:7b:30:89:bf:7c:5c:4d:ce:55: b3:24:99:c0:5b:11:50:18:fe:dd:45:dd:99:70:4e: 5e:cd:a4:ff:80:0a:e9:92:02:02:aa:40:a3:42:e0: ee:93:be:de:b7:b5:cf:e3:1e:ea:fa:a6:c4:f2:72: 67:28:ee:5d:8e:ee:67:0f:ac:d1:b6:ad:ca:84:93: a7:23:29:26:7f:a1:7c:e4:0a:0b:0f:a5:45:a1:d8: 3b:ea:4f:7c:83:8a:f2:39:d1:50:3f:30:9a:ff:f6: c0:3a:18:74:a6:4c:e8:04:09:46:cd:23:08:bc:d1: 21:23:f1:b0:1e:86:88:96:21:1e:53:3b:eb:72:c3: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1B:9B:0F:ED:5C:DF:EC:9C:E6:C0:A1:D6:41:6B:E4:4A:05:5E:62 X509v3 Authority Key Identifier: keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5b:2b:46:bd:08:a5:71:44:30:76:0b:3b:92:a0:18:40:65: 82:4f:4b:22:95:7e:80:85:ce:59:9c:e9:b7:2a:a4:90:23:31: c8:fa:1a:f4:c9:f4:f0:e2:01:74:af:5f:79:f8:fe:59:1a:c4: 3c:de:8b:e4:84:ed:54:41:65:25:74:20:39:d0:ea:55:19:4b: 90:c9:17:f3:9c:c1:13:17:11:6e:ef:00:98:ef:cc:45:41:02: b0:ee:e0:ac:50:d3:54:aa:91:ed:86:97:15:87:c7:60:fb:55: 63:f4:7c:57:a3:52:4f:89:f6:30:9a:74:05:cd:25:0a:8f:d2: 99:f5:85:85:ff:ab:ae:70:81:3d:83:e8:8b:d9:dc:5f:c8:fa: ec:6a:96:55:0a:58:d1:ba:5d:04:0e:3f:a5:2f:b7:24:f4:65: 3a:55:e7:f6:dd:db:6f:c4:f0:a6:a8:81:61:18:4e:9a:7f:05: 9b:58:bc:5a:f2:fb:5c:92:2e:41:5a:10:ed:8b:61:07:a2:fb: 69:bc:a9:23:d9:62:68:c5:e3:16:f2:29:b7:b1:d4:33:aa:90: b6:93:0a:03:ef:6b:e5:47:57:94:87:25:79:19:1c:c2:0d:a5: 91:11:f3:bd:df:98:dd:a8:37:f0:b7:c6:99:1a:8c:89:ee:07: f6:40:72:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFBRjIxMTAvBgNVBAUTKEIxQTE4QzIwNjc3NThGRThDOTIxOTgxRThCMTFGQTMw OEU2MjY5M0IwHhcNMjUxMTA0MjA1ODUyWhcNMjUxMTExMjA1ODUyWjAYMRYwFAYD VQQDEw02OTBhNjkwYy1lNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9gE7Dqe4x089VY6kklEUP33lg8XYCA6RrEJjJojE3hqiZoSmX6xOUIScDIj JLOWTqK6TzG2ZJkC8qEHtcyJCo9IdgbfGnveESLc7Nk/aRZj8Wk4gIZfQSXvufzb NYPMg4HtOJ/SuA7PIXZC3Gvh6VKCZsr860hBRyn782J7MIm/fFxNzlWzJJnAWxFQ GP7dRd2ZcE5ezaT/gArpkgICqkCjQuDuk77et7XP4x7q+qbE8nJnKO5dju5nD6zR tq3KhJOnIykmf6F85AoLD6VFodg76k98g4ryOdFQPzCa//bAOhh0pkzoBAlGzSMI vNEhI/GwHoaIliEeUzvrcsOfjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0bmw/t XN/snObAodZBa+RKBV5iMB8GA1UdIwQYMBaAFLGhjCBndY/oySGYHosR+jCOYmk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUFGMi84MjI2QUI3MkY3 MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWotakpJWmdlaXhINk1JNWlh VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhR01JR2Qxai1qSklaZ2VpeEg2TUk1aWFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUFGMi84MjI2QUI3MkY3MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWot akpJWmdlaXhINk1JNWlhVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZWytGvQilcUQwdgs7kqAYQGWCT0silX6Ahc5ZnOm3KqSQIzHI+hr0 yfTw4gF0r195+P5ZGsQ83ovkhO1UQWUldCA50OpVGUuQyRfznMETFxFu7wCY78xF QQKw7uCsUNNUqpHthpcVh8dg+1Vj9HxXo1JPifYwmnQFzSUKj9KZ9YWF/6uucIE9 g+iL2dxfyPrsapZVCljRul0EDj+lL7ck9GU6Vef23dtvxPCmqIFhGE6afwWbWLxa 8vtcki5BWhDti2EHovtpvKkj2WJoxeMW8im3sdQzqpC2kwoD72vlR1eUhyV5GRzC DaWREfO935jdqDfwt8aZGoyJ7gf2QHKd -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:18 2025 by rpki-client